Privacy Policy

1. Data controller and service identity

The data controller and service provider is Apollo Brothers Inc., operating under the Spartak Lab brand.

Data-related questions can be submitted via the official support channels listed below.

2. Data we collect

We may process contact and technical information required to operate the platform and grant access.

• Account data: email, access identifiers, and selected locale.
• Technical data: IP address, usage events, and basic browser/device metadata.
• Payment statuses and transaction identifiers from payment providers.
• For subscriptions: subscription identifiers, next billing/expiry timestamps, and auto-renew status.

3. Data sources

Data comes directly from users, from automatic platform usage signals, and from third-party payment providers.

4. Purposes of processing

• Provide course access and maintain user accounts.
• Respond to support requests and operational inquiries.
• Handle payment confirmations, refunds, and anti-fraud checks.
• Improve product quality through analytics and diagnostics.
• Comply with legal obligations and protect legitimate interests.

5. Payment providers and processor roles

Payments are processed by external providers that act under their own privacy terms for payment data.

Spartak Lab receives only the minimum status and reference data needed for access delivery and support.

For recurring billing, this may include subscription metadata such as next payment date and subscription state.

6. Cookies, local storage, and analytics

We use cookies and local storage for session continuity, locale preference, and core analytics functionality.

• Essential cookies are required for login state and security.
• Analytics events are used in aggregated form to improve the service.

7. Retention periods

Data is retained only for as long as needed to provide services, meet legal obligations, and resolve disputes.

8. Security measures

We apply organizational and technical controls to reduce unauthorized access and accidental loss risks.

No internet transmission method can guarantee absolute security.

9. Cross-border processing

Depending on infrastructure and providers, data may be processed in multiple countries.

10. Your rights

Subject to applicable law, you may request access, correction, deletion, or restriction of processing.

Requests can be submitted through the listed support channels.

11. Children's privacy

The service is not intended for children below the age permitted by applicable law without required guardian consent.

12. Policy updates

We may update this policy when legal, infrastructure, or product requirements change.

The latest policy version is always available on this page.